[tahoe-lafs-trac-stream] [Tahoe-LAFS] #2215: mitigate heartbleed vulnerability

Tahoe-LAFS trac at tahoe-lafs.org
Thu Jan 22 17:24:03 UTC 2015


#2215: mitigate heartbleed vulnerability
-------------------------+-------------------------------------------------
     Reporter:  daira    |      Owner:  daira
         Type:  defect   |     Status:  new
     Priority:           |  Milestone:  1.10.1
  critical               |    Version:  1.10.0
    Component:  code     |   Keywords:  security integrity confidentiality
   Resolution:           |  capleak pyopenssl cffi packaging manual-test-
Launchpad Bug:           |  needed
-------------------------+-------------------------------------------------
Changes (by zooko):

 * keywords:
     security integrity confidentiality capleak pyopenssl cffi packaging
     review-needed
     =>
     security integrity confidentiality capleak pyopenssl cffi packaging
     manual-test-needed
 * owner:  zooko => daira
 * status:  assigned => new


Comment:

 removing `review-needed` keyword

 The next step is for Daira to test the heartbleed-detector on her own copy
 of openssl which she knows is patched to do heartbeat correctly (and is
 therefore invulnerable to heartbleed).

 adding `manual-test-needed` keyword

--
Ticket URL: <https://tahoe-lafs.org/trac/tahoe-lafs/ticket/2215#comment:21>
Tahoe-LAFS <https://Tahoe-LAFS.org>
secure decentralized storage


More information about the tahoe-lafs-trac-stream mailing list